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The invention relates to a conditional access system for controlling the access 
of receivers of end-users to data transmitted from a data content source in an uplink system, 
said uplink system comprising a scrambler for scrambling the content supplied from the 
content source, an entitlement control message generator for generating entitlement control 
messages containing a control word and an entitlement identification and a transmitter for 
transmitting the scrambled content and the entitlement control messages, in which access 
system a descrambler, an entitlement control message decoder and means for recording 
entitlements are associated to the receiver, and in which access system, if a match between the 
entitlement identification in the entitlement control message and the stored entitlement exists, 
the entitlement control message decoder supplies a control word to the descrambler for 
descrambling a part of the received scrambled content for which the receiver is entitled. 

Such a conditional access system is known from the article "A single 
conditional access system for satellite-cable and terrestrial TV" published in IEEE 
Transactions on Consumer Electronics, Vol. 35, No. 3, August 1989, pages 464-468. 

Current conditional access systems provide for the following entitlements to 
give access to services: 

subscription (which entitlement gives access to a service); 

pay-per-view (which entitlement gives access to an event); 

impulse-pay-per-view (locally generated pay-per-view entitlement); 

and 

pay-per-time (giving access to a service). 

Subscription and pay-per-view are so-called prebooked entitlements. The 
subscriber needs to contact the service provider, normally by telephone, for obtaining such an 
entitlement. The subscriber can be billed in advance or later. This may of course depend on the 
expected solvability of the subscriber and on the presence of good communication lines, i.e. 
mail and telephone. 

Impulse pay-per-view is a locally generated entitlement. It enables the 
subscriber to make last minute choices without contacting the service provider. However, 
choices will be reported back automatically to the service provider later, normally by 
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telephone. The subscriber will be billed and this requires the presence of telephone line and 
the expectation that the subscriber will pay. 

In a pay-per-time scenario the subscriber pays for the time he or she consumes a 
service. The amount of time watched will be reported back automatically to the service 
5* provider later, normally by telephone. The subscriber could be billed later. This requires also 
the presence of a telephone line and the expectation that the subscriber will pay. 

From the description above it follows that choosing events by the user is (now) 
in fact only possible if a telephone line is available. In the absence of a telephone line, 
immediate user influence is hardly possible. 
10 The invention has the object to provide a conditional access system of the 

above-mentioned kind, in which more user influence is allowed. 
O This object is achieved by the invention in that the receiver side is provided 

ri with means for receiving and storing a meta-entitlement of the end-user, said meta-entitlement 

C including an event number range, and means for extracting from the meta-entitlement an 

g 1 5 actual entitlement identification including the event selected by the end-user, after which a 
IT control word from the entitlement control message is supplied to the descrambler if the 

entitlement identification in the entitlement control message matches the actual entitlement. 

According to the invention prebooked entitlements, called meta-entitlements are 
■* defined, which indicate a range of events from which a user is allowed to make one or more 

: 20 selections. Such an entitlement must be sent to the user in advance, but the user may decide up 
to the last moment if he uses (part of) the entitlement for some event or not. This provides for 
immediate user influence on the entitlements obtained without needing a return channel. This 
functionality could be called "event-out-of-range-selection". 

The main advantages of the invention are: 
25 - providing a choice between a given number of events 

- payment in advance 

- there is no need to report afterwards (like in case of IPPV). 

The invention will be explained further by reference to the enclosed figure 
showing the architecture of a preferred embodiment of a conditional access system according 
30 to the invention. 

In general, in conditional access systems one could distinguish among others a 
service and an event. 

A service is a sequence of programs under the control of a broadcaster which 
can be broadcasted as part of a schedule. The service is the central referenced entity. 
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An event is a grouping of elementary broadcast data streams with a defined start 
and end time belonging to a common service, e.g. first half of a football match, News Flash, 
first part of an entertainment show. An event is always part of one and only one service, i.e. 
one event cannot be part of multiple services. 
5L According to the invention a so-called meta-entitlement is defined, which 

includes among others a set of events, from which set events could be selected by the user. 
This entitlement is transmitted to and stored at the user. Entitlement control messages are also 
transmitted to the user, including event identifications. At the user side means are provided for 
extracting the actual entitlement from the meta-entitlement if allowed and decided by the user. 
1 0 This actual entitlement then gives access to the event selected. By means of the actual 

entitlement a control word is extracted from the entitlement control message and supplied to 
the descrambler at the user-end, so that the scrambled event can be descrambled and is 
accessible for the user. 

The abovementioned type of conditional access could be implemented in a prior 
1 5 art conditional access system, which implementation is described hereafter. 

Prior art conditional access systems use entitlement control messages for 
controlling the access to an offered content item and entitlement management messages for 
storing the bought entitlements at the end-user. 

In conditional access systems several entitlements exist. 
20 A subscription entitlement gives access to a (range of) service(s), while a pay- 

per-view (PPV) entitlement gives access to a (range of) specific program(s) in a service. A 
PPV-entitlement could be considered as a limited subscription entitlement. 

As shown in the figure the uplink system 1 of the conditional access system 
comprises an ECM generator 2 to the inputs of which an event number generator 3 and a 
25 control word generator 4 are connected. The uplink system 1 further comprises a content 
source 5, of which the output is connected to a scrambler 6. 

At the end-user location a receiver 7 is provided, which comprises a 
descrambler 8. Furthermore, at the end-user location a security module 9 is provided. 

The security module 9 comprises a means 10 for storing a meta-entitlement. 
30 Said meta-entitlement includes a set of events, from which set the user may make a selection 
of events. Preferably a meta-entitlement is transmitted through an entitlement management 
message (EMM). 
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In an embodiment of the invention the meta-entitlement includes the number of 
selections field, which indicate how many events the user is allowed to select and the set of 
dates field, indicating between what dates the user is allowed to make selections. 
An example of a meta-entitlement is: 
5* <service-nr> 

<selection counter> 

<begin-programme-nr-end-event-nr> 

<begin-date-end-date> 

This meta-entitlement is transmitted through an EMM and subsequently stored 
10 on a security module. The meta-entitlement does not entitle decryption of ECM's, but is used 
to derive an actual entitlement. 

Suppose the user wants to access a program with following ECM's: 
~? <service-nr> 
'~4 <event-nr> 
Ck 15 <current-date> 

The user is entitled to select the program if <service-nr> is equal, and 
Cm <programme-nr> and <current-date> are in the range as indicated by the meta-entitlement. 

The smart card will generate the real entitlement from the meta-entitlement and ECM if the 
LH user decides to select the program. This entitlement allows decryption of the corresponding 

C3 20 ECM and has the following syntax: 

<service-nr> 

<programme-nr> 

<current-date> 

To control the number of selections we introduce the <selection-counter> object 
25 in meta-entitlements. It indicates the number of selections still allowed and is updated after 
each selection. If the user selects a programme the <selection counter> will be decreased by 
one. If it becomes zero no selections are allowed anymore. 

The figure should be read from the left-hand bottom corner to the right-hand 
upper corner. It visualises the three main steps in the mechanism from sending a meta- 
30 entitlement to the scrambling event. In the first step the user obtains a prebooked meta- 
entitlement which indicates from which events he or she may choose. If the user tunes to such 
an event he or she may indicate if he or she desires an entitlement for that event through the 
user input. If yes, the security module extracts the actual entitlement from a meta-entitlement 
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and stores it in the second step. Due to this entitlement the security module will decrypt the 
control words in the ECM required to descramble the event. This is step 3. 

Preferably the ECM's and EMM's are cryptographically protected. 



